Privacy Policy

Last updated: 11 November 2026

Who we are

Naughty Weekends organises dirty weekends, anniversary weekends, surprise trips and other weekends away for couples in Newcastle upon Tyne. In this notice, "we", "us" and "our" mean Naughty Weekends, based in Newcastle upon Tyne.

We are the data controller for the personal data described in this notice. That means we decide how and why it is used, and we are responsible for looking after it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this notice or how we handle your data, email us at info@naughtyweekends.co.uk.

The information we collect

When you request a quote

Our quote form asks for:

your name and email address;
your phone number, if you choose to give it;
the occasion, your budget range, approximate arrival date and length of stay;
any ideas, wishes or other details you include in your message;
your confirmation that you and your partner are both 18 or over and that you agree to be contacted about your enquiry.

The form also records the address of the page you sent it from, so we know which part of the website your enquiry relates to.

When you email us or book

If you email us, we keep your messages and anything you send with them. If you go ahead with a booking, we may also need further details such as your partner's name, arrival times and any dietary or access requirements. If you give us information about your partner, please make sure they're happy for you to share it and point them to this notice. If the weekend is a surprise, they can still ask us about their data at any time.

Health and dietary information

Information about allergies, medical conditions or access needs can be special category data. We only ask for it when it's needed to make suitable arrangements, we only use it for that purpose, and we only share it with the suppliers who need it to look after you both.

Technical information

When the form is submitted, our form provider may process technical information such as your IP address and browser details to deliver the message and filter out spam. Like most websites, our hosting provider may also record basic technical data in server logs for security and to keep the site running.

How we use your information and our lawful bases

UK GDPR requires us to have a lawful basis for each way we use personal data. We rely on the following:

Steps before a contract, at your request. Replying to your enquiry, preparing your quote and answering questions about it.
Performance of a contract. Making and managing your bookings, sending confirmations and itineraries, and dealing with changes once you've booked.
Legitimate interests. Keeping a record of enquiries and correspondence, following up on a quote you asked for, preventing spam and misuse of our website, and improving our service. We only rely on this where our interests aren't outweighed by your rights.
Legal obligation. Keeping financial and booking records required by tax and accounting law, and responding to lawful requests from authorities.
Consent. Sharing your details with suppliers when you book, using any health or dietary information you give us (explicit consent), and sending you news or offers if you have asked to receive them. You can withdraw consent at any time by emailing us.

We don't send marketing emails unless you've asked for them, and we don't use your data for automated decision-making or profiling.

We never sell your personal data. We only share it in these situations:

Suppliers, when you book. To arrange your weekend we pass the necessary details to the hotels, spas, restaurants and other suppliers involved in your booking. We only do this once you've asked us to go ahead and agreed to it, and only share what each supplier needs. Each supplier is responsible for how it handles your data under its own privacy policy.
Service providers who help us run the business. This includes our form provider, email provider and website host. They process data on our behalf, under contract, and may only use it to provide their service to us.
Where the law requires it. For example, to comply with a court order, to help prevent fraud or to protect someone's safety.

Our form provider and international transfers

Our quote form is hosted by Formspree, which receives your form submission and forwards it to us by email. Formspree acts as our data processor and is based in the United States, so information you submit through the form may be transferred to and stored outside the UK.

Where personal data is transferred outside the UK, we make sure appropriate safeguards are in place as required by UK data protection law. Depending on the provider, these may include the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it. You can contact us for more information about these safeguards.

Cookies and third-party content

We don't use advertising, tracking or analytics cookies on this website. If we ever need cookies that aren't strictly necessary, we'll ask for your consent first and update this notice.

The fonts on our website are stored on our own web server, so loading a page doesn't send your IP address or browser details to a third-party font service.

How long we keep your information

Enquiries that don't lead to a booking. We keep these for up to 24 months after our last contact, so we can pick up where we left off if you come back to us, and then delete them.
Bookings. We keep booking, payment and related correspondence for as long as needed to meet tax and accounting rules, which is normally six years after the end of the financial year in which the booking took place.
Health and dietary information. We delete this once your weekend has taken place and any related queries are resolved.

If you ask us to delete your data sooner, we will, unless we need to keep it to meet a legal obligation or to deal with a claim.

Keeping your information safe

We use appropriate technical and organisational measures to protect your personal data, including secure (HTTPS) connections on this website, password-protected accounts and limiting access to the people who need it. No method of sending or storing data is completely secure, but we take reasonable steps to protect what you share with us.

Your rights

Under UK GDPR you have the right to:

access the personal data we hold about you and get a copy of it;
rectification, to ask us to correct information that is wrong or incomplete;
erasure, to ask us to delete your data in certain circumstances;
restriction, to ask us to limit how we use your data in certain circumstances;
object to us using your data on the basis of legitimate interests, and to stop any direct marketing at any time;
data portability, to receive data you gave us in a commonly used format or have it sent to another organisation, where this applies;
withdraw consent at any time where we rely on consent. This won't affect anything we did before you withdrew it.

To use any of these rights, email info@naughtyweekends.co.uk. We may need to confirm your identity first. There's normally no charge, and we'll respond within one month, or tell you if we need longer because the request is complex.

Age

Our services are only for adults. Both people on every booking must be 18 or over, and we don't knowingly collect personal data from anyone under 18.

Complaints

If you're unhappy with how we've handled your personal data, please email us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.

Changes to this notice

We may update this notice from time to time, for example if we change how we work or the law changes. The latest version will always be on this page, with the date it was last updated at the top.

You may also want to read our booking terms and website terms.